CVE-2022-29078

CVE-2022-29078 affects Node.js ejs, version 3.1.6. The vulnerability is a server-side template injection in settings[view options][outputFunctionName], where input is parsed as an internal option and can overwrite outputFunctionName to execute an arbitrary OS command during template compilation. ...

CVE-2021-29078

creationtimestamp| type| source ---|---|--- 2021-03-23 11:38:26+00:00| seen| https://t.me/cibsecurity/25300...

CVE-2021-29078

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before...

CVE-2021-29078

CVE-2021-29078 affects multiple NETGEAR WiFi devices (RBK852/853/854, RBR850, RBS850, RBK752/753/753S/754, RBR750, RBS750) with pre-3.2.17.12 firmware. The vulnerability is a pre-auth, command-injection flaw that could impact confidentiality, integrity, and availability per CVSS scores (3.1: AV:A...

CVE-2023-29078

CVE-2023-29078 is linked to Kiddoware Kids Place Parental Control Android App. Affected version: ≤ 3.8.49; fixed in 3.8.50+. Reported vulnerabilities include XSS, CSRF, and File Upload (stored XSS in the app’s web context per SEC Consult/ CNNVD references). Impact is described as High. Exploitati...